For a long time, the primary way people interacted with AI was through conversation. We asked questions, received answers, generated content, and used the results to make decisions ourselves.
That relationship is beginning to change with the development of AI agents.
AI agents are designed to do more than respond. Depending on their capabilities and the tools available to them, they can plan tasks, interact with external services, use software, and take actions with limited human intervention.
This shift matters because an AI system that can act in the world creates a different set of questions from one that simply generates text.
If an AI assistant gives a poor recommendation, people can ignore it. If an AI agent makes a purchase, pays for a service, or executes a transaction on behalf of a human, the consequences are no longer confined to a conversation.
The agent economy is built around this transition. Agents may increasingly become both consumers and providers of digital services, interacting with other agents, applications, and payment systems.
But intelligence alone is not enough.
An agent needs to be able to act. Other parties need ways to establish what it is, what it is allowed to do, and whether its actions can be trusted.
And that is where the real challenge begins.
The Problem Is Not Just Trust. It Is Controlled Autonomy.
There is an important tension at the heart of autonomous AI.
Give an agent too little authority, and it becomes little more than an assistant that repeatedly asks for permission. It may be capable of planning an entire task, yet still depend on a human to approve every minor step.
Give it too much authority, and the consequences of a mistake become harder to contain. A compromised agent, a poorly designed instruction, or an unexpected decision could lead to actions the user never intended to authorize.
Neither extreme is particularly useful.
The goal should not be to make agents completely independent, nor should it be to keep them permanently dependent on human approval. It should be to give them enough freedom to complete a task while keeping that freedom within clearly defined boundaries.
In the traditional digital economy, a person usually initiates a payment or approves a transaction. In an agent-driven economy, the person may define the objective while the agent decides which actions are necessary to achieve it.
That creates a new requirement: delegated authority must be limited, understandable, and revocable.
An agent should not need unlimited access simply because it needs to complete one task. Its permissions should reflect what the user intends to delegate, how much the task may cost, and how long the agent needs to act independently.
This is the problem that makes infrastructure for agent identity, authorization, and payments worth examining.
Where Kite AI Fits In
Kite AI is building infrastructure intended to support an economy in which AI agents can interact with services and transact.
Rather than treating agents only as software tools that people operate, Kite's approach addresses the infrastructure needed for agents to participate in digital transactions. This includes agent identity, delegated permissions, and payment mechanisms.
The distinction is important.
An intelligent agent may know how to complete a task, but knowing what to do does not automatically give it a safe or reliable way to do it. It still needs to identify itself, obtain appropriate authorization, interact with services, and make payments where required.
These are separate problems, and solving one does not automatically solve the others.
Kite Passport is particularly relevant because its documented design lets an agent pay for supported services on a user's behalf under spending limits the user approves. Its documented workflow connects account setup, wallet funding, session-based spending permissions, and service payments.
This is where Kite's broader vision becomes tangible. Instead of giving an agent unrestricted financial access, a user can authorize a defined period of activity with a defined budget.
The interesting idea is not simply that agents could make payments. It is that an agent's ability to transact can be tied to the authority its user has explicitly granted it.
To understand why that matters, it is worth looking at how Kite Passport's documented workflow is designed to work.
Hierarchical Identities: Connecting Agents to Their Owners
An important part of agent infrastructure is not just identifying an agent, but establishing its relationship with the entity that authorizes it.
Kite's documentation describes a three-layer identity model: a user or root identity, an agent identity with delegated authority, and a session identity for a specific period of activity. A standalone agent identity tells us which agent is interacting with a service. The hierarchy adds context by connecting that agent to the user who authorized it and to the more limited session under which it acts.
This can be useful when one person or organization operates multiple agents, each responsible for different tasks. Instead of treating every agent as an entirely separate identity with unrelated permissions, a hierarchy can represent the relationship between the owner and the agents acting under its authority. Kite's documentation also describes agent addresses derived from the user's wallet and session keys that are intended to be short-lived. These are design details of the documented architecture, not a guarantee that every compromise or implementation error is harmless.
It is like a distinction between who is acting and on whose authority they are acting. Both questions matter when software begins making decisions and transactions independently.
For example, a business might operate separate agents for research, data access, and purchasing. Each agent may need different permissions, but its authority ultimately comes from the organization that deployed it. A hierarchical identity structure can help make those relationships explicit rather than leaving them implicit in application logic.
This structure also has important security implications. If an individual agent or session is compromised, a well-designed system should limit the potential damage to the permissions and resources available to that agent or session. Compromising one agent should not automatically grant unrestricted access to the user's underlying authority or every other agent operating within the same ecosystem.
As agents begin delegating tasks to other agents, maintaining clear identity relationships and boundaries around delegated authority becomes even more important. Without them, a compromise at one level could potentially have consequences beyond the original task. The goal is to make authority traceable and compartmentalized, so each agent receives only the access it needs rather than inheriting unrestricted control from the identity above it.
This is a security objective, not a guarantee against every possible failure. Its effectiveness depends on the implementation, the security of the underlying keys, and whether the relevant controls are correctly enforced.
Ultimately, hierarchical identity is about more than organizing multiple agents. It is about preserving a clear relationship between the agent performing an action, the authority under which it acts, and the limits of that authority. As autonomous systems become more interconnected, that separation could become an important foundation for making agent-driven interactions safer and easier to manage.
Kite Passport: From Setup to Autonomous Payments
Kite Passport is designed to let an AI agent pay for supported services on a user's behalf without requiring the user to manually approve every transaction. The user first sets up Passport, funds its wallet, and approves a spending session. The agent can then discover services, make payments, and receive the results within the session's limits.
The workflow matters because it separates three things that are often blurred together: giving an agent access to a payment system, supplying it with funds, and authorizing it to spend those funds.
They are not the same permission.
1. Installing Passport and Connecting an Agent
The documented process begins with the Kite Passport command-line interface, or CLI, and the agent skills that allow a compatible AI agent to interact with Passport.
Kite's documentation covers both coding agents that run on a user's computer and cloud agents that operate on hosted computers. The installation method differs, but the account sign-in process follows the same general pattern.
For supported coding-agent setups, such as Claude Desktop or Codex, the documented process involves running the Passport installation command through the agent's development environment and following the setup prompts to register for Passport and configure the relevant skills.
For supported cloud-agent setups, the user follows the corresponding setup instructions to connect the hosted agent to Passport.
After installation and registration, the user receives two emails: a verification link that opens the Passport dashboard and an eight-character code that must be returned to the agent. The user opens the verification link, creates a passkey using a supported method such as Touch ID, Face ID, Windows Hello, or a hardware security key, and then supplies the code to complete sign-in.
The passkey is an important part of this process because spending-session approval is not supposed to be an unrestricted decision made silently by the agent. The user has an explicit approval step before the agent receives the requested spending authority.
There is also an important practical consideration when using a hosted agent: connecting it to Passport grants that agent access to the user's Passport account. Kite's documentation specifically advises users to review session limits before approving. Convenience should not mean blindly trusting whatever permissions an agent requests.
Once the account and agent are connected, the next requirement is funding.
2. Funding the Passport Wallet
Passport needs funds before an agent can make paid requests. According to Kite's documentation, its service-payment workflow uses USDC.e on Kite Chain.
The dashboard provides several ways to add funds, depending on where the user is starting from.
Buying with a card: Users who are starting without existing crypto can purchase USDC on Base through the Passport dashboard's Add funds section. They choose an amount and payment method, complete the purchase, and wait for the balance to update after settlement.
Depositing stablecoins: Users who already hold supported stablecoins can use the Crypto tab to access the relevant deposit address. The documentation lists supported deposit options across networks and assets, including USDC on Base, Polygon, Avalanche, Tempo, Solana, Arc, and other listed options. Users must send the correct stablecoin to the address associated with its network. Sending the wrong asset or using the wrong network can prevent funds from appearing as expected.
Using Kite Bridge: Users can also move USDC onto Kite Chain through Kite Bridge. They connect the wallet holding their funds, select the source chain and token, choose Kite as the destination, and provide their Passport wallet address as the receiver. After confirming the transactions and waiting for the bridge to complete, the Passport balance should update.
Transferring from a wallet already on Kite: If the user already holds USDC.e on Kite Chain, they can send it directly from an external wallet to the Passport wallet address. Kite's documentation states that the external wallet needs
$KITE tokens to pay the gas fee for this transfer.
The user can check the resulting balance in the dashboard or through the kpass wallet balance command. The agent can also check the balance when asked.
These funding routes give users different ways to prepare the wallet, but funding does not automatically mean the agent has unrestricted permission to spend the balance.
That distinction is central to the Passport model. The wallet holds the funds; the spending session defines the authority the agent receives to use them.
3. Creating a Spending Session
This is arguably the most important step in the entire workflow.
Once the wallet is funded, the agent can request a spending session. Rather than simply asking for general access to the wallet, the session specifies the task and the limits under which the agent is allowed to spend.
Kite's documented session parameters include:
Task summary: A description of what the agent is trying to accomplish.Maximum amount per transaction: The upper limit for an individual payment.Maximum total amount: The overall budget available during the session.Time-to-live (TTL): How long the session remains valid.Approved assets: The assets the session can use.
For example, imagine an agent that needs to make one paid weather API request. A user could authorize a session with a maximum of $2 per transaction, a total budget of $10, and a validity period of 24 hours.
The agent requests the session and receives an approval URL. The user opens that URL on a device where their passkey is available and explicitly approves the request.
Only after that approval does the session become active.
The distinction between the per-transaction limit and the total budget is particularly useful. A maximum per transaction limits the size of any single payment, while the total budget caps cumulative spending across the session. The expiry period adds a time boundary, preventing the session from remaining valid indefinitely.
Once approved, the agent can make eligible payments within the session's limits without requesting a fresh approval for every individual payment. The session expires when its time limit is reached or its budget is exhausted.
This is the core trade-off Passport is trying to manage: the user retains control over the scope of authorization, while the agent gets enough independence to carry out the task.
Without this separation, autonomy could mean handing an agent broad financial access. With session-based permissions, the intention is to grant only the authority required for a particular period of work.
Of course, a permission system is only as useful as its implementation. The user must understand what they are approving, and the system must enforce the limits correctly. A session does not guarantee that an agent will choose the right service or make the right decision. It is a way to constrain the actions it is authorized to take.
4. Discovering Services and Making Payments
With the wallet funded and a spending session approved, the agent can search for a suitable paid service in Kite's catalog.
The documented CLI supports service discovery through the ksearch command. A user can also ask a compatible agent to search for available services that match a task, such as finding a weather API.
Once the agent identifies a suitable service, it can make a paid request through the supported payment flow.
One of the mechanisms documented by Kite is x402, a payment protocol built around the HTTP 402 Payment Required response. The basic idea is that a service can indicate that a request requires payment and provide the terms needed to proceed.
The interaction can be understood as a sequence:
The agent requests a resource from a service.If payment is required, the service returns a payment challenge describing the terms.The Passport agent obtains payment authorization within the user's approved spending session.The agent resubmits the request with the required payment information.The service verifies and settles the payment through its supported payment infrastructure.Once payment is confirmed, the service returns the requested resource or response.
The agent can then use that response as part of the larger task it is completing.
This is significant because the payment can become part of the software interaction itself. The agent does not necessarily need to stop, send the user to a conventional checkout page, and wait for them to manually complete every small purchase.
The service defines its payment requirements, Passport applies the user's approved spending authority, and the service delivers the resource after payment is handled.
Kite's service-provider documentation also describes support for the Machine Payments Protocol, or MPP, as another route for services to accept payments from Passport agents. The details differ by protocol, but the broader objective is similar: allow services to specify payment requirements in a way that software agents can handle.
Passport also documents support for direct USDC transfers initiated by an agent within the approved session limits. That is distinct from paying for a service through a protocol-based request, although both depend on the permissions granted to the agent.
It is worth being precise about what this does and does not mean. Not every website or API automatically becomes accessible to Passport agents. A service must support a compatible payment flow, and the agent needs to interact with it correctly. The system provides a way to connect authorization and payment; it does not remove the need for service integration.
5. Monitoring Activity and Retaining Control
Autonomy should not mean losing visibility.
After an agent begins spending, users can review completed payments and session activity through the Passport dashboard. The CLI also provides commands for listing active sessions and viewing recent activity.
This matters because delegated authority should remain understandable after it has been granted. Users need to be able to inspect what their agents have done, how much has been spent, and whether a session remains active.
A session's budget and expiry provide boundaries in advance. Activity records provide visibility afterward. Both are important, but they serve different purposes.
The spending limits constrain what the agent is allowed to do. The activity history helps the user understand what it actually did.
Neither one guarantees that every transaction was wise or every service was legitimate. Monitoring is not a substitute for security, and a record of a transaction does not by itself establish that the underlying software behaved correctly.
Still, the combination is more useful than simply giving an agent a wallet and hoping it behaves as expected.
The broader principle is that delegated autonomy needs both limits and visibility. Users should not have to choose between approving every small action and giving up meaningful control over the process.
6. Revocation: A Control Worth Verifying
Delegating authority is only half of the equation. A robust permission model should also explain how a user can withdraw authority when circumstances change. The task may be complete, the agent may no longer be needed, or its behavior may give the user reason to stop it.
In agent authorization, revocation means invalidating previously granted authority rather than waiting for it to expire naturally. Time-limited sessions provide an automatic boundary, but that boundary may not be soon enough if a user wants to stop a task early.
A budget cap and a revocation mechanism solve different problems. The budget limits potential spending; revocation determines whether an agent should still be allowed to act. Both are important questions when evaluating delegated autonomy.
Ultimately, meaningful control requires more than setting boundaries at the beginning. Users need clear information about both the controls that exist and the controls that remain to be verified.
Autonomy is easier to trust when the scope of delegated authority is clear, time-bound, and, where supported, possible to withdraw.
What This Workflow Actually Changes
Taken together, the Passport workflow creates a defined path from user authorization to agent-driven payment.
The user connects an agent, funds a wallet, approves a session with explicit spending parameters, and lets the agent interact with supported paid services. The user can then review the resulting activity.
That is a more concrete approach to agent autonomy than simply giving an AI system access to a payment method.
It also reveals where the difficult questions remain. How easily can users understand the permissions they are approving? How reliably are those limits enforced? What happens when an agent makes a bad choice within its authorized budget? How secure are the agent environment, the wallet, and the service receiving payment?
Passport addresses part of the authorization and payment problem, but it cannot eliminate every risk associated with autonomous software.
That is not a reason to dismiss the approach. It is a reason to evaluate it according to what it actually provides.
The Other Half: Services Need to Accept Agent Payments
There is another side to this system that is easy to overlook.
An agent can have a wallet, an identity, and approved spending permissions, but it still needs somewhere to spend its funds. For the agent economy to function, service providers must be able to accept payments from agents as well as from people.
This is why Kite's service-provider documentation is relevant to the larger picture.
Kite describes two payment integration paths for providers: x402 and MPP. With x402, a provider can return an HTTP 402 Payment Required response containing the terms of payment. The Passport agent then obtains the appropriate authorization from the user's approved session and resubmits the request with payment information. The provider verifies and settles the payment through a compatible facilitator before delivering the service.
MPP follows a similar broad pattern of requesting a resource, presenting payment terms, receiving payment credentials, verifying payment, and delivering the resource, but it supports a different set of payment mechanisms and interaction patterns.
The important point is that the system is not only about helping agents spend money. It is also about making services accessible to them through payment flows designed for software.
Imagine a developer offering access to a specialized API. If an agent can discover the service, understand its payment requirements, obtain authorization within its user's budget, and receive the API response after payment, the developer has a potential route to serve automated customers without building an entirely separate manual checkout experience.
That does not guarantee demand or make integration effortless. Providers still need to implement the relevant protocol, configure their payment infrastructure, and ensure that their service handles requests securely. Agents also need a reliable way to discover and interpret the service.
But this two-sided structure matters. An agent payment system becomes more useful as more relevant services can accept payments, and services have a stronger reason to support agent payments when there are useful agents and customers ready to use them.
In other words, the infrastructure has to connect both sides of the transaction.
Why Payments Matter to the Agent Economy
Autonomy becomes more useful when agents can pay for the resources they need.
An agent might require access to an API, a data source, a computational service, or another agent's capabilities. If every interaction requires a human to manually negotiate and complete the payment, automation can quickly become cumbersome.
This is one reason payment infrastructure is relevant to the emerging agent economy.
Stablecoins are useful in these settings because they are designed to track the value of a reference currency, making transaction values easier to reason about than assets whose prices fluctuate substantially. In Kite Passport's documented payment flow, USDC.e on Kite Chain is the asset required for the funded Passport wallet.
The potential benefit is not that every AI interaction needs a payment. Most do not. The benefit is that when an agent genuinely needs to purchase a resource, the payment can be integrated into its workflow instead of becoming a manual interruption.
But a transaction that technically works is not necessarily a useful transaction. Network fees, service pricing, failed requests, security risks, and authorization complexity all influence whether automated payments make sense in practice.
The agent economy needs more than the ability to move money. It needs payment systems like Kite Passport that are practical for software to use and safe enough for people to delegate to.
A Useful Framework for Evaluating Agent Infrastructure
When looking at projects building for an agent economy, I think five questions are more useful than simply asking whether a project supports AI agents.
1. Stablecoin-native payments
Can agents pay for services using assets and payment mechanisms suited to digital transactions? The important consideration is whether the payment flow is useful in practice, not merely whether a token or wallet exists.
2. Programmable permissions
Can users define the authority an agent receives? Spending limits, restricted actions, and time-bound permissions can help ensure that delegated access remains proportional to the task.
3. Agent-first authentication
Can an agent identify itself and interact with a service through a process designed for software, while respecting the authorization granted by its owner?
4. Auditable activity
Can users inspect relevant actions and transactions? Visibility is important when an agent acts on someone's behalf, although a transaction history alone cannot prove that every decision was correct or every underlying process was secure.
5. Economically viable transactions
Can the system support transactions at a cost and speed that make sense for the services involved? If small payments are too expensive or difficult to execute, many potential use cases may remain impractical.
Together, these questions provide a useful way to assess infrastructure for autonomous agents. They also highlight why no single feature should be mistaken for a complete solution.
A wallet does not solve authorization. An identity system does not guarantee good decisions. An audit trail does not eliminate security vulnerabilities. And a payment protocol does not automatically create sustainable demand.
The strongest systems need these components to work together. Kite presents its approach through a related framework called SPACE: Stablecoin-native payments, Programmable constraints, Agent-first authentication, Compliance-ready infrastructure, and Economically viable micropayments. This framework is a useful statement of what the project is aiming to support, but it should not be taken as proof that every challenge in each category has already been solved. The practical test is how these elements work together in real deployments.
What Could This Enable?
If agent identity, permissions, and payments become sufficiently reliable, several kinds of interactions could become easier to automate.
Agents could purchase access to APIs or data, pay for computational resources, and coordinate with specialized agents that provide services they cannot perform themselves. Businesses might also deploy agents that complete parts of a workflow across multiple services without requiring a human to approve every individual interaction.
These are plausible directions for an agent economy, not proof that every use case is already operating at scale.
Their success will depend on more than the availability of infrastructure. Developers need to build useful services, users need reasons to delegate tasks, and businesses need to trust the systems handling their resources.
The technology can reduce friction, but it cannot manufacture demand on its own.
The Role of the KITE Token
Kite also has a native token,
$KITE , which should be considered separately from the stablecoins used for Passport service payments. In the documented funding workflow, USDC.e is used for agent payments on Kite Chain, while
$KITE is required to pay gas when transferring funds from an external wallet already on Kite Chain.
That documented gas role should not be confused with a complete account of the token's wider utility. Any additional role should be assessed against the project's current documentation, distinguishing functions that are live from those that are planned. Token utility should not be inferred from the broader vision alone.
The Real Test Is Whether We Can Delegate Safely
The promise of AI agents is easy to understand. They could take on more of the work between deciding what we want and actually getting it done.
But the more authority we give them, the more important it becomes to decide where that authority ends.
I see this as one of the central challenges of the agent economy. Developers are not only trying to build systems that can act independently. They are trying to build systems that people can reasonably trust to act on their behalf.
Kite's focus on agent identity, delegated permissions, and payment infrastructure addresses parts of that challenge. Passport makes the idea particularly concrete by connecting a user's spending limits to the actions an agent can take within an approved session. Its longer-term significance will depend on how reliably these controls work, how easily services integrate with the payment flows, and whether users find the experience useful enough to adopt.
There are still open questions around security, accountability, usability, and adoption. Those questions should not be brushed aside simply because the technology is promising. They are precisely what will determine whether the promise becomes useful in practice.
An agent that can execute a task is capable. An agent that can execute it within clearly defined limits is more useful. And an agent whose actions can be understood, monitored, and stopped through controls that are actually supported is easier to trust. That is the broader direction Kite is working toward, although the real test will be how these controls perform in practice.
The future of autonomous AI should not be measured by how much freedom we give agents, but by how intelligently we define the freedom they need.
#KiteBBW @KITE AI 中文